Penetration Testing Engineer, Security Testing

Do you enjoy breaking software and services? Do you strive to understand systems, software, and services deeply in order to break them? Do you find yourself automating your work every chance you get? If so, we'd love for you to join us.

The Security penetration testing team is looking to hire a Penetration Testing Engineer to join its ranks. Our team is responsible for manual assessment of all products, services and software released by Amazon. We specialize in diving deep to find security issues that static analysis tools cannot and we write tooling to help with these goals. The threat surface area is large and diverse, and we use results found in manual analysis to help improve our enterprise-wide automation to proactively spot and fix potential security issues to protect customers.

This is a hands-on technical role that includes mentoring, guiding, and supporting junior engineers. The person in this role will help us evolve the way we work by advising and improving on team processes to bring efficiency and enable us to scale. This could be done by through automation, advising leadership, owning problem areas and programs, or something else entirely. We want smart, creative engineers who want to contribute to uplifting the entire organization.

On this team you will be reading and manually reviewing source code in Java, Ruby, Python, JavaScript, Rust, C, and other languages to look for security bugs. We don't expect you to be an expert at those languages, but we do want you to be curious and able to learn new things quickly.

Key job responsibilities:

• Execute manual penetration testing and source code review engagements against a variety of web services and software
• Develop other engineers
• Advise management
• Write automation to help scale security testing at Amazon
• Provide actionable long-term risk mitigation guidance
• Provide clear communication on issues to developers, suggest and help to test fixes
• Partner with Amazon developers to drive improvement in application security as a result of security review engagements

About Amazon Security: At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.